This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YT0j8hITJ9kX1wjY_hUzgkVZWag.cer File: YT0j8hITJ9kX1wjY_hUzgkVZWag.cer (raw, json) Hash identifier: cK3s250tsNwsf39VNPFB6m4fp2NF51G/VgQm04b/U2Q= Subject key identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B791025DF6B8E08D794B8CBC3226FC835 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Thu 01 Jan 2026 10:17:40 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: IP: 185.209.208.0/22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:25:df:6b:8e:08:d7:94:b8:cb:c3:22:6f:c8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 1 10:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=613d23f2121327d917d708d8fe153382455959a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bb:7d:d1:d7:12:6d:a7:b4:df:e7:95:3a:65: 85:52:9a:1e:c0:b0:35:e4:7c:87:95:e1:b7:87:ed: 4c:ec:21:7f:20:22:cb:78:49:d0:2d:78:a3:9a:1d: 3d:fb:11:5d:8f:c6:e7:f1:01:a3:98:65:8a:fd:cd: f1:a6:ce:00:b5:90:a7:b3:88:87:1e:9d:63:18:bd: cb:1a:c1:27:e4:c2:7a:bc:2b:4f:13:f9:9b:77:d5: c9:db:0d:cf:ca:0f:2a:94:46:c5:10:9c:35:2b:8d: ec:ed:46:52:b2:d2:39:9c:90:50:55:06:33:30:ce: dc:35:77:79:84:d2:09:ee:79:7e:6e:90:d5:eb:54: 7a:dd:0b:a0:e3:61:e6:d8:fe:4d:bb:c9:e8:b5:df: f6:d3:b9:af:c7:98:f9:56:db:2b:77:ca:26:ed:a0: 60:94:37:62:65:7a:1e:3a:b9:e9:46:cd:fe:da:c4: 6a:f8:4f:a1:16:8c:1e:fb:77:4f:1e:51:4c:03:2b: 8c:2c:33:72:d6:d4:1a:50:c4:f4:8d:8d:cb:37:ba: 87:36:12:e7:04:8a:17:cb:80:35:da:a6:0b:b7:bf: b8:d0:2e:9d:2a:ae:04:88:90:51:8a:72:54:d7:78: b3:23:d6:37:b9:a2:0b:da:3d:6d:95:35:3c:cb:c9: d2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3D:23:F2:12:13:27:D9:17:D7:08:D8:FE:15:33:82:45:59:59:A8 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fce6be-0896-4487-aa34-7a605ba40c1e/1/YT0j8hITJ9kX1wjY_hUzgkVZWag.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.209.208.0/22 Signature Algorithm: sha256WithRSAEncryption 67:02:14:cd:bf:5d:2a:68:32:b0:38:a6:5d:a1:0e:a8:13:38: a9:11:f0:9d:14:c4:f1:2c:28:99:92:e8:e8:b8:1e:d8:73:26: f5:62:7f:df:43:16:ff:b2:91:15:dd:c2:ea:74:e6:cd:e5:d4: f9:fe:eb:c1:03:46:66:de:cb:59:a4:9d:c6:a7:21:81:b4:f6: fe:a0:05:53:f0:2b:e8:0f:b6:b7:dd:f2:2f:21:8c:97:cb:66: 34:d3:93:91:84:41:0f:f0:5d:a2:98:35:12:fc:c0:28:be:c0: 25:b4:94:20:10:5c:ac:17:1f:a6:0b:bc:51:7a:70:fa:4a:25: 9f:df:2f:b8:c5:3a:20:b1:67:9f:49:81:c4:06:76:ba:36:ca: 18:59:bd:4e:79:20:57:f2:fc:42:72:63:0b:c9:b0:63:63:52: 00:3d:f3:10:f0:cc:06:e6:97:73:f9:47:a1:58:43:dc:34:3e: 68:95:5d:33:d6:22:ae:5b:de:da:41:84:cb:c2:29:b0:79:53: 69:a9:8e:16:7d:32:e4:68:94:93:97:f3:b8:68:23:f2:97:dc: df:0e:e1:3a:91:f1:f7:7a:56:b9:5b:fd:4e:63:4f:06:c4:24: fc:0d:47:3f:16:99:e8:25:5e:f5:c3:fa:eb:13:03:71:2e:bb: f5:72:85:09 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt5ECXfa44I15S4y8Mib8g1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAxMTAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTNkMjNmMjEyMTMyN2Q5MTdkNzA4ZDhmZTE1MzM4MjQ1NTk1OWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Lt90dcSbae03+eVOmWFUpoewLA1 5HyHleG3h+1M7CF/ICLLeEnQLXijmh09+xFdj8bn8QGjmGWK/c3xps4AtZCns4iH Hp1jGL3LGsEn5MJ6vCtPE/mbd9XJ2w3Pyg8qlEbFEJw1K43s7UZSstI5nJBQVQYz MM7cNXd5hNIJ7nl+bpDV61R63Qug42Hm2P5Nu8notd/207mvx5j5Vtsrd8om7aBg lDdiZXoeOrnpRs3+2sRq+E+hFowe+3dPHlFMAyuMLDNy1tQaUMT0jY3LN7qHNhLn BIoXy4A12qYLt7+40C6dKq4EiJBRinJU13izI9Y3uaIL2j1tlTU8y8nSIQIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFGE9I/ISEyfZF9cI2P4VM4JFWVmoMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwL2ZjZTZi ZS0wODk2LTQ0ODctYWEzNC03YTYwNWJhNDBjMWUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvZmNlNmJl LTA4OTYtNDQ4Ny1hYTM0LTdhNjA1YmE0MGMxZS8xL1lUMGo4aElUSjlrWDF3allf aFV6Z2tWWldhZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQCudHQMA0GCSqGSIb3DQEBCwUAA4IBAQBnAhTN v10qaDKwOKZdoQ6oEzipEfCdFMTxLCiZkujouB7Ycyb1Yn/fQxb/spEV3cLqdObN 5dT5/uvBA0Zm3stZpJ3GpyGBtPb+oAVT8CvoD7a33fIvIYyXy2Y005ORhEEP8F2i mDUS/MAovsAltJQgEFysFx+mC7xRenD6SiWf3y+4xTogsWefSYHEBna6NsoYWb1O eSBX8vxCcmMLybBjY1IAPfMQ8MwG5pdz+UehWEPcND5olV0z1iKuW97aQYTLwimw eVNpqY4WfTLkaJSTl/O4aCPyl9zfDuE6kfH3ela5W/1OY08GxCT8DUc/FpnoJV71 w/rrEwNxLrv1coUJ -----END CERTIFICATE-----Generated at Sun Jan 25 06:08:29 2026 by rpki-client